# IP Intelligence Briefing: 103.191.122.219/32
Classification: Low Risk / Passive Infrastructure
Date of Analysis: 2026-07-28
---
## Executive Summary
IP 103.191.122.219 is a low-risk address located in Lahore, Pakistan (Pakistan, Punjab). The address shows no active threat indicators, no open services, and is currently not classified as a known attacker, spam source, or Tor exit node. No security actions are recommended at this time.
---
## Profile Overview
| Metric | Value |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **Provider Score** | 0 |
| **Authority Score** | 0 |
| **Stability Score** | 0 |
| **Blacklist Count** | 0 |
| **Reputation** | Low Risk |
Geolocation
- Country: Pakistan (PK)
- Region: Punjab
- City: Lahore
- Coordinates: 31.58°N, 74.33°E
Network Classification
- Origin ASN: 139043
- BGP Prefix: 103.191.122.0/24
- Network Role: Firewalled / No Services
- Infrastructure Type: Not Cloud, CDN, VPN, Proxy, Tor, Hosting, Mobile, or Residential
---
## Service & DNS Analysis
Open Ports: None detected
DNS Records: No PTR hostnames, no forward resolution
Hosted Domains: 0
TLS Certificates: None
HTTP Services: None active
---
## Threat Intelligence
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Threat Feeds: None
- Known Campaigns: None
- Abuse Confidence Score: Not applicable
- Behavioral Indicators: 0 honeypot hits, 0 enumeration strikes, 0 WAF violations
---
## Neighborhood Assessment (103.191.122.0/24)
The /24 subnet contains 13 neighbor IPs with the following risk distribution:
- High Risk: 0
- Medium Risk: 2
- Low Risk: 8
Abuse Density: 0%
Notable Neighbors with Risk Scores:
- 103.191.122.21 (Risk: 40)
- 103.191.122.193 (Risk: 40)
- 103.191.122.75, 103.191.122.77, 103.191.122.159 (Risk: 25)
- 103.191.122.41, 103.191.122.61 (Risk: 15)
---
## Observation History
Total Observations: 7
Latest Signal: 2026-07-28T16:32:52+00:00
Recent observations include:
- DNSSEC validation (Valid: true, Confidence: 0.90)
- Geolocation data (Lahore, Pakistan, Confidence: 0.70)
- Blacklist monitoring (Total lists: 8, Listed: 0, Confidence: 0.50)
The IP has shown stable characteristics with no significant changes over the observation period.
---
## Relationships
No relationships detected to other entities (hostnames, organizations, certificates, or correlated IPs).
---
## Control Plane Data
- Route Stability: False (isRouteStable)
- Route Changes (30d): 0
- DNSSEC: Valid
- DNSBL Listed Count: 0 out of 8 total lists
---
## Recommended Actions
No firewall rules or mitigation actions are currently recommended.
The IP presents minimal risk to the network. However, SOC analysts should:
- Monitor for any changes in network role or service exposure
- Correlate with any future threat intelligence updates for ASN 139043
- Review neighborhood IPs if broader subnet compromise is suspected
---
Confidence Level: Moderate
Data Sufficiency: Limited (many fields returned as null/empty)
Last Updated: 2026-07-28
*This briefing is based on automated intelligence data. Validate findings through additional source corroboration before operational decisions.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Wali Telecom administrator |
| ASN | AS139043 |
| Network Name | WALITELECOM-PK |
| CIDR Block | 103.191.122.0/23 |
| RIR | APNIC |
| Country | PK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS139043 |
| Network Prefix | 103.191.122.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 17:41:37 UTC |
| Last Seen | 2026-08-31 20:34:37 UTC |
| Profile Built | 2026-08-31 20:37:00 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.191.122.219
Who owns the IP address 103.191.122.219?
103.191.122.219 is registered to Wali Telecom administrator. The address falls within the 103.191.122.0/23 network block. Registration is held at APNIC.
Where is 103.191.122.219 located?
Geolocation data places 103.191.122.219 in Lahore, Punjab, Pakistan. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.191.122.219 malicious or safe?
103.191.122.219 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 103.191.122.219 a VPN, proxy, or data center address?
103.191.122.219 is classified as a residential network based on network ownership and behavioural analysis.